Tool Tests DB2 Security

Application Security Inc. on Monday rolled out an IBM DB2 version of its AppDetective application security vulnerability scanner.

The scanning and penetration-testing software performs network-based penetration tests and security audits. AppDetective locates and identifies a variety of applications within a network, including those running on DB2 and Lotus Domino databases, as well as on databases from Oracle Corp., Microsoft Corp. and Sybase Inc. The software presents version numbers, patches and other inventory-specific information for use in security analysis. Security audits can be performed on target DB2 databases remotely from laptops or desktops.

The tool produces reports with instructions on how to fix vulnerabilities with reference links to database vendors' sites to ease the task of securing patches.

ASI, of New York, already markets the tool for use with Domino, Oracle's namesake database, Microsoft SQL Server and Sybase ASE databases. Officials said that the company soon will release versions of AppDetective for MySQL, Oracle Application Server, Microsoft Exchange and IBM WebSphere.